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Abstract 

The classical Yao principle states that the complexity -R e (/) of an optimal randomized algorithm for 
a function / with success probability 1 — e equals the complexity max M D£(f) of an optimal deterministic 
algorithm for / that is correct on a fraction 1 — e of the inputs, weighed according to the hardest 
distribution /i over the inputs. In this paper we investigate to what extent such a principle holds for 
quantum algorithms. We propose two natural candidate quantum Yao principles, a "weak" and a "strong" 
one. For both principles, we prove that the quantum bounded-error complexity is a lower bound on the 
quantum analogues of max M D^(/). We then prove that equality cannot be obtained for the "strong" 
version, by exhibiting an exponential gap. On the other hand, as a positive result we prove that the 
"weak" version holds up to a constant factor for the query complexity of all symmetric Boolean functions. 

Keywords: Quantum computing, computational complexity. 

1 Introduction 

1.1 Motivation 

In classical computing, the Yao principle [18] gives an equivalence between two kinds of randomness in 
algorithms: randomness inside the algorithm itself, and randomness on the inputs. Let us fix some model 
of computation for computing a Boolean function /, like query complexity, communication complexity, etc. 
Let Re{f) be the minimal complexity among all randomized algorithms that compute f(x) with success 
probability at least 1 — e, for all inputs x. Let D£(f) be the minimal complexity among all deterministic 
algorithms that compute / correctly on a fraction of at least 1 — e of all inputs, weighed according to a 
distribution [i on the inputs. The Yao principle now states that these complexities are equal if we look at 
the "hardest" input distribution /i: 

fl e (/)= max 

This is a special case of Von Neumann's minimax theorem in game theory [12, 15]. 

Since its introduction, the Yao principle has been an extremely useful tool in computational complexity 
analysis. In particular, it allows us to derive lower bounds on randomized algorithms from lower bounds on 
deterministic algorithms: choose some "hard" input distribution /i, prove a lower bound on deterministic 
algorithms that compute / correctly for "most" inputs, weighted according to fx, and then use R e (f) > D£(f) 
to get a lower bound on R e (f). This method is used very often, because it is usually much easier to analyze 
deterministic algorithms than to analyze randomized ones. 

In recent years quantum computation received a lot of attention. Here quantum mechanical principles are 
employed to realize more efficient computation than is possible with a classical computer. Famous examples 
are Shor's polynomial-time factoring algorithm [16] and Grover's search algorithm [9]. However, the field is 
still young and open questions are abundant. In particular, there has been a search for good techniques to 
provide lower bounds on quantum algorithms. Most of these lower bounds are in the query model, where the 
complexity of an algorithm is measured by the number of queries it needs in order to compute some function 
(we will provide formal definitions of this and other concepts in the next section). Two general methods 
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in this direction are the polynomial method introduced by Beals, Buhrman, Cleve, Mosca, and de Wolf [2] 
and the method of quantum adversaries of Ambainis [1]. In this paper we investigate the possibility of a 
third method, a quantum Yao principle. It is our hope that such a principle will prove itself useful as a link 
between techniques for lower bounds on exact and bounded-error quantum algorithms. 

The first difficulty one runs into when investigating a quantum version of the Yao principle, is the question 
what the proper quantum counterparts of R e (f) and D^(f) are. Let us fix the error probability at e = | 
here (any other value in (0, ^) would do as well). The quantum analogue of R\/z(f) is straightforward: let 
Q2{f) denote the minimal complexity among all quantum algorithms that compute f(x) with probability 
at least |, for all inputs x. However, the inherently "random" nature of quantum algorithms prohibits 
a straightforward definition of "deterministic" quantum algorithms in analogy of deterministic classical 
algorithms. We therefore propose two different definitions, a weak and a strong one. In the following, let 
f : D —* {0, 1} be some function that we want to compute, with D C {0, 1}^. If D = {0, 1}^ then / is 
a total function, otherwise / is a promise function. Let A be a quantum algorithm, Pa{x) the acceptance 
probability of A on input x (the probability of outputting 1 on input x, and [i : D — > [0, 1] a probability 
distribution over the inputs. 

Definition 1 A is weakly |-exact for f with respect to fx iff fj,({x | Pa{%) = /(#)}) > §■ 

Definition 2 A is strongly |-exact for f with respect to fi iff A is weakly —exact for f with respect to fi 
and Pa(x) G {0, 1} for all inputs x e {0, 1}^. 

Informally, in the second definition we require the algorithm to output the same output on the same input, 
even on inputs x £ D where the algorithm fails and even on x € {0, 1} JV \_D (similar to a classical deterministic 
algorithm). In the first definition, we only require this "input-determines-output" behavior to occur for a 
fi- fraction of at least | of the inputs where the algorithm gives the correct output f(x). Note that a strongly 
|-exact algorithm for / with respect to fj, actually computes some total function g : {0, 1}^ — > {0, 1} with 
success probability 1, namely the function g(x) = Pa{x). This g will agree with / on at least | of the inputs. 

These two definitions lead to a weak and a strong quantum counterpart to the classical distributional 
complexity D^, 3 (f): let Qy VE {f) and Qg E {f) denote the minimal complexity among all weakly and strongly 

|-exact algorithms for / with respect to fi, respectively. We can now state two potential quantum versions 
of the Yao principle: 

• Strong quantum Yao principle: Q2(f) = max Qg E (f) 

• Weak quantum Yao principle: Q2(f) — m &X-QwE(f) 

In this paper we investigate to what extent these two quantum Yao principles hold. 

1.2 Results 

Our results are threefold. Firstly, we prove that both of these principles hold in the '< '-direction, for all /: 

• Q 2 (/) < maxQg E (/) 

• Q 2 (/) < maxQ^ B (/) 

Clearly, the second inequality implies the first, since QweU) — QsE(f) f° r an / an( ^ A 4 - ^ ne P r001 is similar 
to the classical game-theoretic proof, with a bit more technical complication. We emphasize that this result 
is perfectly general, and applies to all computational models to which the classical Yao principle applies. 

In order to investigate to what extent the '> '-directions of these two quantum Yao principles hold, we 
instantiate our complexity measures to the query complexity setting. Our second result is an exponential 
gap between Q2(f) and Qg E (f) for the query complexity of Simon's problem [17]: 

• There exist / and \x such that Q2U) is exponentially smaller than Qg E (f)- 
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This shows that the strong quantum Yao principle is false. Thirdly, we prove that the weak quantum Yao 
principle holds up to a constant factor for the query complexity of all symmetric functions: 

• Qztf) = © (^^QwEifij for a11 symmetric / 

For this result we first construct a quantum algorithm that can determine the TV-bit input x with certainty 
in 0(VkN) queries if k is a known upper bound on the Hamming weight of x. We then use that algorithm 
to construct, for every symmetric function / and distribution /i, a quantum algorithm that computes f{x) 
with certainty for "most" inputs x. In addition to this result for symmetric functions, we also show that 
for a particular monotone non-symmetric function /, the max M complexity lies in between the best 

known bounds for Q2(f)- 



2 Preliminaries 

In this section we formalize the notion of query complexity, define several complexity measures, state Von 
Neumann's minimax theorem and derive the classical Yao principle from it. 

2.1 Query Complexity 

We assume familiarity with classical computation theory and briefly sketch the basics of quantum computa- 
tion; an extensive introduction may be found in the book by Nielsen and Chuang [14]. Quantum algorithms 
operate on qubits as opposed to bits in classical computers. The state of an m-qubit quantum system can 
be written as 

ie{o,i} m 

where \i) denotes the basis state i, which is a classical m-bit string. The a^s are complex numbers known 
as the amplitudes of the basis states \i) and we require X)ie{o i} m \ a i\ 2 ~ 1- Mathematically, the state of 
a system is thus described by a 2 m -dimensional complex unit vector. If we measure the value of \(f>), then 
we will see the basis state |i) with probability \cti\ 2 , after which the system collapses to Operations 
which arc not measurements on a system of qubits correspond to unitary transformations on the vector of 
amplitudes. 

In the query model of computation, the goal is to compute some function / : D — > {0, 1} on an input 
x € D C {0, 1} N , using as few accesses ("queries") to the N input bits as possible. In quantum algorithms, 
it is by now standard to formalize a query as an application of a unitary transformation O that acts as 
follows: 

0\i, b, z) — \i,b@ Xi, z). 

Here i G {1, . . . ,N}, b G {0, 1}, © denotes the exclusive-or function, and z denotes the workspace of the 
algorithm, which is not affected by O. A T-query quantum algorithm A then has the form 

A = U T OU T -iO---U 1 OU , 

with each [/, a fixed unitary transformation independent of the input x. A is assumed to start in the all-zero 
state |0 . . . 0), and its output (0 or 1) is obtained by measuring the rightmost bit of its final state A\Q . . .0). 
The acceptance probability Pa(x) of a quantum algorithm A is defined as the probability of getting output 
1 on input x. Its success probability Sa(x) is the probability of getting the correct output f(x) on input x. 

A quantum algorithm A computes a function / : _D — » {0, 1} exactly if Sa(x) = 1 for all inputs x G D. 
Algorithm A computes / with bounded-error if Sa{x) > § for all x G D. We use Qe{J) and Qz{f) to denote 
the minimal number of queries required by exact and bounded-error quantum algorithms for /, respectively. 
These complexities are the quantum versions of the classical deterministic and bounded-error decision tree 
complexities D(f) and i?2(/)> respectively. For completeness, we repeat our two alternative quantum versions 
of the classical distributional complexity D^(f) from the introduction. Let [i be a probability distribution 
on the set of all possible inputs. An algorithm A is weakly —exact for f with respect to fi if fi({x \ Pa(x) = 
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f( x )}) > f j an d A is strongly —exact for f with respect to p if A is weakly |-exact for / with respect to p 
and Pa(x) € {0, 1} for all x € {0, 1}^. By Qg E {f) and QweU) we denote the minimal number of queries 
needed by strongly and weakly |-exact quantum algorithms for / with respect to p, respectively. Note that 
QwE(f) — QsE(f) f° r au / arL d bence in particular max p Qyy E (f) < max M Qg E {f). 

One of the first quantum algorithms operating in the query model is Grover's search algorithm [9, 4]. 
If t = \x\ > then the algorithm uses j\/N/t queries and with high probability outputs an i such that 
Xi = 1. Here we use |x| to denote the Hamming weight (number of l's) in x, and Xi to denote the ith bit of 
x. If \x\ = then the algorithm outputs 'no solutions'. Brassard, H0yer, Mosca, and Tapp [4] give an exact 
version of Grover's algorithm that can accomplish the same task with probability 1 if £ (the number of l's 
in the input) is known. 

For total functions / : {0, 1} N — > {0, 1}, Beals, Buhrman, Cleve, Mosca, and de Wolf [2] proved that clas- 
sical deterministic query complexity D(f) is polynomially related to the exact and bounded-error quantum 
complexities: D(f) = 0(Q £ (/) 4 ) and D(f) = 0(Q 2 (ff). 

A function / : {0, 1}^ — ► {0, 1} is symmetric if its value f(x) depends only on \x\. For such /, define 
f k = f(x) where \x\ = k. In [2] it is proven that Q 2 (f) = B(^N(N -T(f))), where T(f) = min{|2fc-A-l| | 
Ik fk+i and 0<fc<A^— 1}. Informally, the quantity T(f) measures the length of the interval around 
Hamming weight ^ where / is constant. A symmetric function / is a threshold function if there is a 
< t < N, such that f(x) = 1 iff \x\ > t. Note that for t < N/2 we have Q 2 (f) = O(VtN) as a 
direct consequence of the bound for symmetric functions. A function / : {0, 1}" — ► {0, 1} is monotone if 
(Vi x t < Vl ) f(x) < f(y). 

2.2 The Classical Yao Principle 

Consider the following game-theoretic setting: player 1 has a choice between some m "pure" strategies and 
player 2 has a choice between n "pure" strategies. If player 1 plays i and player 2 plays j, then player 1 
receives "payoff" Py. Player 1 wants to maximize the payoff, player 2 wants to minimize. Viewing P as 
an to x n matrix, and using and ej to denote the appropriate unit column vectors with a 1 in place i, 
respectively j, the payoff corresponds to the matrix product efPej. However, the players may also use 
"mixed" strategies (probability distributions over "pure" strategies) to further their goals. Mixed strategies 
of players 1 and 2 correspond to to- and n-dimensional column vectors p and /x, respectively, of non-negative 
reals that sum to 1. Now the expected payoff is p T Pfi. Note that if player 1 can choose his strategy p knowing 
player 2's strategy p, then he would choose p to maximize the payoff p T Pp; in this situation player 2 would 
do best to choose p to minimize max p p T Pp, giving expected payoff min M max p p 1 Pp. Conversely, if player 2 
could choose his strategy knowing player l's strategy, then the expected payoff would be max p min M p T Pp. 
Von Neumann's famous minimax theorem [12, 15] tells us that these two quantities are in fact equal: 

min max p T Pp — maxmin p 1 Pp. 

hp p v 

It is not hard to see that without loss of generality the "inner" choices can be assumed to be pure strategies, 
so as an easy consequence we also have 

minmaxefPix = maxmin/? T Pe 7 . 

Pi P J 

Yao [18] was the first to interpret this result in computational terms. We will sketch the computational 
interpretation below. Fix some classical model of computation for which the set of deterministic algorithms 
of complexity < c is finite, for every c. Examples of such models are query complexity, communication 
complexity, etc. Player 1 chooses an algorithm to compute / : D — > {0, 1} and player 2 chooses an input 
x that is hard for player 1. The pure strategies for player 1 are all deterministic classical algorithms of 
complexity < c and hence his mixed strategies are all randomized classical algorithms of complexity < c. 
The pure strategies for player 2 are the inputs in D and his mixed strategies are all probability distributions 
p over D. We define the payoff matrix such that Pi X = 1 if algorithm i computes / correctly on input x, 
and Pi X = otherwise. In this setting, the minimax theorem states 

min max ef-P/i = maxminp T Pe a; . 

fi i p x 
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Let us interpret both sides of this equation. On the left, the quantity efPp is the fraction of inputs on 
which deterministic algorithm i is correct, weighed according to p, and max^ efPp denotes this fraction for 
the optimal deterministic algorithm of complexity < c. Thus the left-hand-side of the equation gives this 
optimal correct fraction for the hardest distribution p achievable by deterministic complexity-c algorithms. 
On the other hand, p T Pe x is the success probability on input x achieved by the randomized algorithm given 
by probability distribution p over deterministic algorithms, and min^ p T Pe x is its success probability on 
the hardest input. Thus the right-hand-side gives the highest worst-case success probability achievable by 
randomized complexity-c algorithms. Since these two quantities are equal for all c, we obtain the classical 
Yao principle: 

R e (f) = max ££(/). 

fj- 

3 Proof of One Half of the Quantum Yao Principle 

As a first result we prove that Q 2 (f) < max M Q^ B (/)- The proof is similar to the derivation of the classical 
Yao principle above, but the details are a bit more messy. 

Theorem 1 For all f : D -> {0, 1}, with D finite, Q 2 (f) < maxQ^ B (/). 

Proof. Consider the (infinite) set of all quantum algorithms of complexity < max,, QweU)- Let i be any 
algorithm from this set, and x € D an input. Consider the quantity [^(x)], which is 1 if algorithm i 
computes f(x) with success probability 1, and which is otherwise. Call algorithms i and j similar if 
|>>i(x)J = L'S'j ( ar ) J f° r au x G D. In this way, similarity is an equivalence relation on the set of all quantum 
algorithms of complexity < max M Qy^ E {f). Note that this relation has at most 2\ D \ equivalence classes. From 
each equivalence class, we choose as a representative an algorithm from that class with the least complexity. 

Now consider the game in which player 1 wants to compute /, and as pure strategies he has available 
the (finite) set of representatives of the equivalence classes. Player 2 is an adversary that tries to make 
life as hard as possible for player 1 by choosing hard inputs x € D to /. Let S be the matrix of success 
probabilities (Si X — Si(x)). Define the payoff matrix as P ix = [Si X \ . Now consider the quantity max^ efPp. 
This represents the /i-fraction of inputs on which the best weakly |-exact quantum algorithm for / with 
respect to that p is correct. By construction, this quantity is at least | for all p. Using the minimax theorem, 
we now obtain: 

2 

- < min max efP/it = m&xmin p T Pe x < ni&yLmhv p T Se x . 
3m* p x p x 

Here the last term can be interpreted as the success probability of a quantum algorithm formed by a probabil- 
ity distribution p over the set of representatives of the equivalence classes. By the above inequality, this algo- 
rithm has success probability > | for all inputs x £ D. Since it is a probability distribution over algorithms 
of complexity < max M Q^r E (f), its complexity is at most max^ Q^ B (/)- Hence Q2U) < max M Q^ E (f)- □ 

Corollary 1 For all f : D —> {0, 1}, with D finite, Q 2 (f) < maxQg s (/). 

Note that although we restrict our attention to the query model of computation, the proofs of Theorem 
1 and Corollary 1 also work for the other models of complexity where the classical Yao principle applies. 

4 A Counterexample for the Strong Quantum Yao Principle 

In this section we prove that the strong quantum Yao principle does not hold. There exists a problem / 
such that for a suitable distribution p, Q 2 {f) is exponentially smaller than Qg E (f)- This exponential gap 
follows from a known result about the classical and quantum complexity of Simon's problem [17], and the 
fact that classical deterministic and quantum exact complexity are polynomially related for total problems 
[2, Theorem 5.4]. 

Theorem 2 There exist a problem f and a distribution p such that Q 2 {f) = 0(n 2 ) and Qg E (f) — Q(2i). 



5 



Proof. Consider Simon's problem: given a function <fi : {0, 1}" — ► {0, 1}™ with the promise that there is an 
s G {0, 1}™ such that 4>{a) = 4>{b) iff a © b = s, decide whether s = or not. This function </> is given as an 
input x of N — n2 n bits, using n 1-bit entries for each function value <p(-). The input bits can be queried 
in the usual way. Using Simon's bounded-error quantum algorithm, this problem can be solved in 0(n 2 ) 
queries, and hence Q2(Simon) = 0(n 2 ). Now define a distribution \i which uniformly places half the total 
weight on inputs with s = and half the total weight on inputs with s^O: 

if s = 



2(2^ 

M*) = { 2(2»-l)( 2 ^ 1 )(2»-i)l if S ^ 

else. 

Simon proved that under this distribution, any classical algorithm that is correct on a fraction > | requires 
f2(\/2™) queries. Now take any strongly |-exact quantum algorithm A that solves this problem and makes 
T queries, then A computes some total function g. Since D(g) — 0(QE(g) 4 ), this implies that there exists a 
deterministic classical algorithm that computes g using 0(T 4 ) queries. But this classical algorithm is then 
exact on a /it-fraction | of all Simon inputs. Simon's lower bound on classical algorithms now implies that 
0(T 4 ) = fl(V^), and hence Q^ E {Simon) = S7(2f ). □ 



5 A Positive Result for the Weak Quantum Yao Principle 

In this section we show that the weak quantum Yao principle holds for all symmetric functions. This section 
is divided into three subsections, in the first we prove the result for threshold functions, in the second 
subsection, we extend it to symmetric functions. In the third subsection we investigate the weak quantum 
Yao principle for the uniform 2-level AND-OR tree, which is monotone and non-symmetric. 

5.1 Equality up to a Constant Factor for Threshold Functions 

For every distribution fi, we will exhibit a weakly |-exact quantum algorithm that computes threshold 
function / with threshold t in time O(VtN). This, together with Theorem 1 and the (known) fact that 
Q2U) — Q(VtN) for threshold functions / [2], gives the desired result. 

Note that given a threshold function / : {0, 1}^ — > {0, 1} with threshold t, in order to be sure that 
f(x) = 1, one will have to find at least t l's in the input. The crucial idea behind our algorithm is that if 
the number of l's in the input is large enough, then for each distribution /i over the inputs, we can pick a 
substantially smaller part of the input such that there arc between * and 100* l's in this subpart for a large 
//- fraction of the inputs. This idea is formally stated in the following technical lemma. 1 

Lemma 1 Let t be a threshold, /1 a probability distribution over the x E {0, 1}^, and i an integer such that 

10 < i < \ogN — \ogt — 1. Denote the event t2 l < \x\ < t2 l+1 by I, and let x Ay denote the bitwise AND of 
x andy. There is a y e {0,1} N with \y\ = min{i|^, N}, such thatPr^t < \xAy\ < 100* | I] > 0.7. 

Proof. Fix an x € {0, 1} N with t2 l < \x\ < t2 t+1 and assume that < N, for otherwise the lemma 
trivially holds. We claim that if we pick a y € {0, 1}^ with \y\ = uniformly at random, then Pi[t < 
\x A y\ < WOt I I] > 0.7. To prove this claim, note that 

,\x\\(N-\x\\ 

Pr[\xAy\=k\I]= {k) ^- k) . 

y\y\> 

This means that \x A y\ is hypergeometrically distributed, with expected value E(\x A y\) = ^j^. Note that 
in this case 10* < E(\x A y\) < 20*. By Markov's inequality, it then follows directly that Pr[|a; A y\ > 100* | 

11 < 0.2. 

1 We need the condition i > 10 in this lemma in order to be able to approximate the hypergeometric distribution by a 
binomial distribution with sufficient accuracy. 
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We can approximate the above distribution with a binomial distribution since the number of draws is 
small compared to the size of the sample space, see e.g. [13], and we shall henceforth treat \x A y\ as if 
it were binomially distributed, with success probability 9 = ^ and number of draws n — \y\. To bound 
Pt[\x A y\ < t | J], we use the Chernoff bound as explained in [11, pp. 67-73]: 

Pr[\x A y\ < (I -S)E(\x A y\) | I] < e^^ 1 . 

Choosing <5 = j^, we obtain Pr[|a; A y\ < t \ I] < e~^r < 0.1. Combining the previous two inequalities, it 
then follows that Pr[i < \x A y\ < lOOi | /] > 0.7. This proves the above claim. 

Now imagine a matrix whose rows are indexed by the x satisfying t2 t < \x\ < t2 t+1 and whose columns 
are indexed by the M — (,^,) different y of weight |y| = ^|r^- We give the (x,y) entry of this matrix value 
n(x\I) if t < \x A y\ < lOOi and value otherwise. By the above claim, each x row will contain at least 70% 
non zero entries, so the sum of the entries of each x row is at least 0.7M/j,(x\I). Hence, the sum of all entries 
in the matrix is equal to 0.7M/x(x|/) = 0.7M. But then there must be a column with /i-weight at least 
0.7. The y corresponding to this column is the y we are looking for in this lemma. □ 



We will use the fact stated in the previous lemma to successively search for t l's in exponentially smaller 
parts of the inputs, assuming the presence of increasingly more l's in the original input. The following 
lemma states that this searching can be done efficiently: 

Lemma 2 There exists a quantum algorithm that can find all the 1 's in an input x of size N with probability 
1, using at most ^VkN queries, if k is a known upper bound on the number of l's in x. 

Proof. Consider Algorithm 1. It is easily proven that this algorithm indeed finds all l's, as follows. Assume 
an upper bound k > \x\ on the number of l's in x. If the exact version of Grover's algorithm finds an index 
of a 1 bit, then we set this index to in the search space. Because k is an upper bound on the number of 
l's in x, we can lower k each time we find a 1, without k ever becoming less than the actual number of l's 
in x. If it does not find a 1, then we know that our upper bound was too high and again we can safely lower 
it by 1. Using these facts, it is easily proven by induction on k that the algorithm indeed works as claimed. 



Algorithm 1 

for i = k down to 1 do 

Apply Grover's exact search algorithm assuming 

there are i solutions, 
if A solution has been found then 

mark its index as a zero in the search space 
end if 
end for 

output the positions of all solutions found 



The number of queries made by this algorithm is at most: 




□ 

We are now ready to prove an upper bound on Q l ^ VE (f) for threshold functions. 

Lemma 3 For threshold function f with threshold t, and for every distribution fi, we have Qy/EiS) = 
0(VtN). 
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Proof. Fix a distribution /j. Invoking Lemmas 1 and 2, our algorithm is as follows. First we count the 
number of l's in the input using Algorithm 1, assuming an upper bound of 2 10 t l's. If after that we haven't 
found at least t l's yet, then we successively assume that there are between t2 l and t2 l+1 l's in the input, 
with i going up from 10 to log N — logt — 1. For each of these assumptions, we search a smaller part of the 
input. If we have reached the i for which t2 % < \x\ < i2 4+1 , then Lemma 1 guarantees us that for a large 
fi- fraction of the inputs we can find a small subpart containing between t and lOOi l's. We then count the 
number of l's in this subpart using Algorithm 1. Algorithm 2 is the actual algorithm we will use. 



Algorithm 2 

Count the number of l's in the input using Algorithm 1, assuming an upper bound of 2 10 t l's 
if at least t l's are found then 

output 1 
end if 

for i = 10 to log A — logi — 1 do 

Let j/W G {0, 1}^ be a string of weight min{A, ^r-} satisfying Lemma 1 
Using Algorithm 1, count the number of solutions in the subpart 

of the input induced by j/W, assuming an upper bound of lOOt l's. 
if at least t l's are found then 

output 1 
end if 
end for 
output 



This algorithm will be correct on all inputs x with |a;| < t and will produce a correct answer on at least a 
/i-fraction 0.7 of all inputs x with \x\ > t as guaranteed by Lemma 1. Hence it will produce a correct answer 
on a [i- fraction of at least: 

li({x | \x\ < t}) + 0.7(1 - n({x | \x\ < t}) > 0.7. 
Furthermore, its query complexity is equal to: 

log TV-log t-l / r—\ 
i=10 V / 

where the first term corresponds to the cost of searching the entire space once with a small upper bound, 
and the summation corresponds to searching consecutively smaller subparts y( l \ □ 

Recall that for threshold functions / : {0, 1}^ -> {0, 1} with threshold t, Q 2 (/) = Q(VtN). By Theorem 1 
it then follows that max M = fl(VtN). In combination with Lemma 3, this yields: 

Lemma 4 For all threshold functions f : {0, 1} N — ► {0, 1} with threshold t, 

Q 2 (f) = 6 (maxQ^C/)) = 6 (Vtiv) . 

5.2 Equality up to a Constant Factor for Symmetric Functions. 

With the result about threshold functions in mind, we can easily prove that the quantum Yao principle holds 
for all symmetric functions as well. 

Theorem 3 For all symmetric functions f : {0, 1} N — > {0, 1} 

Q 2 (f) = (maxQ^(/)) = 6 (y/N(N - r(/))) . 
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Proof. From [2] wc know that Q 2 (f) = 0(y / N(N — T(f))). Also, Theorem 1 tells us that Q 2 {f) < 
max M Q^y E {f)- It remains to show that for every distribution ii, = 0{y/ N(N — T(/))). 

Fix a probability distribution [i over the set of all inputs. Note that T(f) measures the length of the 
interval around Hamming weight ^ where / is constant, so in order to compute /(x), it suffices to know |x| 

exactly if |x| £ [0, = h or |x| £ { N+r{ 2 f) ~ 2 , N] = J 3 , or to know that |x| e [^ J1 , JV+r ^ /) ~ 2 ] = J 2 . 

We can use the threshold algorithm of the previous section to determine whether x £ I\ (with /i-error 
probability reduced to 1/6) . We can use another threshold algorithm to determine whether ieJ 3 (with the 
role of 0's and l's reversed, and also with error < 1/6). Both threshold algorithms take 0(yjN(N- T(f))) 
queries. Now for at least 2/3 of the inputs x, weighed according to /x, both of these threshold algorithms will 
give the correct answer. For all such x we can determine f(x) with certainty: if we know |x| £ I2 then wc 
are done, because / is constant in this interval. If |x| £ I\ or |x| £ I3 then we use Algorithm 1 to count |x|, 
using 0(y/ 1 N(N — T(/))) queries. Thus we have a weakly |-exact quantum algorithm for / with respect to 
it, using 0(y/N(N - T(f))) queries in total. □ 



5.3 A Result for the AND-OR Tree 

Above we proved that the weak quantum Yao principle holds (up to a constant factor) for all symmetric 
functions. A similar result might be provable for all monotone functions. Recall that a Boolean function / 
is monotone if the function value cannot change from 1 to if we change some input bits from to 1. In this 
section we prove a preliminary result in this direction, namely that the known upper and lower bounds on 
the Q2(/)-complcxity of the 2- level AND-OR tree carry over to weakly |-exact quantum algorithms. This 
monotone but non-symmetric function is the AND of y/N independent ORs of yfN variables each. In the 
sequel, we use AO to denote this AT-bit AND-OR tree. 

No tight characterization of Q2(AO) is known, but Buhrman, Cleve, and Widgerson [5] proved Q2(AO) = 
0(\/N log N) via a recursive application of Grover's algorithm. Using a result about efficient error-reduction 
in quantum search from [6], this upper bound can be improved to Q2(AO) = 0(\/NlogN). This nearly 
matches Ambainis' lower bound of Q(VN) [1]. Note that Ambainis' bound together with our Theorem 1 
immediately gives the lower bound Taax tl Q^ VE (AO) = Q(y/N). Below we show that also the best known 
upper bound carries over to weakly |-exact algorithms: Qy VE (AO) — 0(\/N log N) for all fi. 

To prove this result, we first show that we can efficiently reduce the error in weakly |-exact quantum 
search algorithms, in analogy with [6]. For every \i and e, we will construct a quantum search algorithm that 

uses O ^^/./Vlog(l/e)^ queries and solves the search problem with certainty for 1 — e of all inputs, weighed 
by ti. We first need the following lemma, which states that if an input contains many l's, then wc can 
deterministically reduce its size to a smaller search space which will probably still contain at least one 1. 

Lemma 5 For all probability distributions fi on {0, 1}^ and integers c, there exists a y £ {0, 1} N with 
\y\ = min{^f , N}, such that Pr M [|x A y\ > 1 | |x| > t] > 1 - e~ c . 

Proof. If > N then obviously the lemma holds (pick y = 1 N ), so assume ^f- < N. Fix an x £ {0, 1}^ 
with |x| > t. If we pick a y £ {0, 1}^ with \y\ = ^j- uniformly at random, then 

(Vj) = (N- |x|) ■ (N - \x\ - 1) ■ ■ ■ (N - |x| - \y\ + 1) 
© ~ N(N-l)...(N-\y\ + l) 

^1 _ My*' < e -\*V\y\/N < e -c. 

Hence Pr[|x A y\ > 1 | |x| > t] > 1 — e~ c . By exactly the same averaging argument as in the proof of Lemma 
1, we can show that for every distribution zz, there exists a y such that Pr M [|x Ay\ > 1 | |x| > t] > 1 — e~ c . □ 

With Lemma 5 at our disposal, we can now prove that we can "cheaply" reduce the error of weakly 
|-exact quantum search algorithms to small e. 



Pr[|x Ay\ = | |x| > t] = 

< 
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Lemma 6 For every e > and every probability distribution /j over {0, 1}^, there exists a weakly (1 — e)- 
exact quantum search algorithm with respect to \i that uses queries. 

Proof. Fix an error bound e and distribution \i. Our (1 — e)-exact search algorithm is inspired by [6]. Let 
to = log(l/e) (assume for simplicity that this is an integer). First we run the exact version of Grover's 
algorithm on the input x assuming that |a;| = 1, then we run it again assuming that \x\ — 2, and so on until 
\x\ = t - This takes 



E f ^5 = 0( y/Nh) = O (v/7Vlog(l/ e )) 

i=l 



queries, and finds a 1 with certainty whenever 1 < \x\ < t . 

It remains to find a 1 for "most" of the inputs x that have \x\ > t . Let ji\ be the probability distribution 
H restricted to the x with |x| > t. By Lemma 5, we know there exists a y e {0, 1}^ with \y\ = O(N/t ) such 
that Pr Ml [|a: A y\ > 1] = Pr^x A y\ > 1 | \x\ > to] > |. Now we use a |-exact quantum search algorithm 
with respect to jjb\ to search the subpart of x indicated by y. This subpart has size 0(N/to), and Lemma 3 
guarantees us that there is |-exact algorithm with 0(y/N/tn) queries. Thus we find a 1 with certainty for 
a ^ii-fraction (and hence also /x-fraction) of at least | — -| = \ of the inputs with \x\ > to- Now we repeat 
this idea to "catch" i of the remaining inputs. Let [i 2 be [i\ restricted to the inputs with \x\ > to where the 
previous algorithm did not find a 1 with certainty. Using another |-exact algorithm (this time with respect 
to tt 2 ) for another y, we can catch | of the remaining inputs. We repeat this t times and eventually catch 

of the inputs (weighed according to /i) in this way. If we still have not found a 1 after all this, we stop and 
output 'no solutions', which ensures that our algorithm is always correct on the all-0 input. Note that the 
second part of the algorithm uses 

to • O(^NjTo) = O (0Vlog(l/e)) 

queries, so our overall query complexity is O (^\/ N log(l/e)^ , as promised. □ 

Using Lemma 6 we now show that the best known upper bound for Q 2 (AO) also holds for weakly |-exact 
quantum algorithms. 



Theorem 4 For every distribution tt on {0, 1}^ we have Qy VE (AO) — O^NlogN). 

Proof. Fix some distribution /x. We will sketch a |-exact quantum algorithm for AO with respect to /i, 
along the lines of the recursive-Grover of [5] . For each of the 1 < i < >/N OR functions at the "bottom" 
of the tree, let fii : {0, 1}^ — > [0, 1] be the distribution over its y/~N input bits induced by /i, i.e., Hi(y) 
is the sum of fj,(x) over all x <G {0, 1} N where the ith block of V^V variables takes value y. Let Ai be a 

weakly ^1 — -exact quantum algorithm with respect to in for the ith OR. By Lemma 6, each Ai takes 

queries. Note that now for | of the inputs, weighed according to /i, all Ai deliver the 

correct answer with certainty. By standard techniques (copying the answer and reversing the computation 
afterwards [3, 8]) we can "clean up" these computations, setting the workspace back to the initial state and 
just retaining the answer bit. 

We now want to run a |-exact quantum algorithm for AND on top of these >/N subtrees to compute 

the AND-OR tree. Let (jf : {0, 1}^ -> [0, 1] be the induced input distribution for the top-AND, i.e., fj,'(y) 
is the sum of fi(x) over all x € {0, 1}^ where the ith OR takes the value yi, for all 1 < i < >/~N. Let A 
be a weakly |-exact quantum algorithm for the -^/A- variable AND with respect to \j! . By Lemma 3 such 
an algorithm makes 0(N 1 ^ 4 ) queries. If we replace, in A, a query to the ith bit by a call to Ai, then we 
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obtain an 
all inputs. 



0(^JN log 7V)-query algorithm that is correct with certainty on a ^-fraction at least | — | = 




□ 



6 Summary and Open Problems 

In this paper we investigated to what extent quantum versions of the classical Yao principle hold. We 
formulated a strong and a weak version of the quantum Yao principle, showed that both hold in one direction, 
falsified the other direction for the strong version, and proved the weak version for the query complexity of 
all symmetric functions. 

The main question left open by this research is the general validity of the weak quantum Yao principle. 
On the one hand, we may be able to find a counterexample to the weak principle as well, perhaps based 
on the query complexity of the order- finding problem. Shor showed that the order-finding problem can be 
solved by a bounded-error quantum algorithm using O (log AT) queries [16]. Using Cleve's 0(iVV3/ i g at) 
lower bound on classical algorithms for order-finding [7], we can exhibit a fi such that any strongly |-exact 
quantum algorithm for / with respect to fi requires N™ 1 ' queries (in the same way as Theorem 1). This 
gives another counterexample to the strong quantum Yao principle. The same problem may even provide 
a counterexample to the weak quantum Yao principle, as it seems hard to construct even weakly |-exact 
quantum algorithms for this problem. 

On the other hand, we may try to extend the class of functions for which we know the weak quantum 
Yao principle does hold. A good starting point here might be the class of all monotone functions. We 
discussed one such function, the 2-level AND-OR tree, in Section 5.3. Unfortunately, at the time of writing 
no general characterization of the Q2(/)-complexity of all monotone functions is known, in contrast to the 
case of symmetric functions. Also, in this direction it might be a fruitful idea to further explore the rapidly 
growing field of quantum game theory (see for example [10]) and the possible connections between that area 
and our work. 
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